GHSA-4CXX-HRM3-49RM

creationtimestamp| type| source ---|---|--- 2025-08-01 18:40:52+00:00| seen| https://t.me/TheDarkWebInformer/19184 2025-08-03 04:07:15+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lvhsk6yo5e2s...

GHSA-2QRG-X229-3V8Q

creationtimestamp| type| source ---|---|--- 2025-07-16 03:14:06+00:00| seen| https://gist.github.com/safer-bot/f2a796b1c3ade94b037bb1ddfcabe9b1 2025-07-16 03:36:23+00:00| seen| https://gist.github.com/safer-bot/72f995b8cd1384d5441af0330c518fe4 2025-07-16 03:56:27+00:00| seen|...

'No Kings’ Protests, Citizen-Run ICE Trackers Trigger Intelligence Warnings

Army intelligence analysts are monitoring civilian-made ICE tracking tools, treating them as potential threats, as immigration protests spread nationwide...

GHSA-F82J-8PP7-CW2W

creationtimestamp| type| source ---|---|--- 2025-06-02 16:45:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114614778635202833 2025-06-02 17:01:55+00:00| published-proof-of-concept| Telegram/evyU1N0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0...

GHSA-2JH5-G5CH-43Q5

creationtimestamp| type| source ---|---|--- 2025-04-24 19:07:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114394506142543507...

CERTFR-2025-ACT-010

creationtimestamp| type| source ---|---|--- 2025-03-10 14:27:47+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3ljzr5f5p4r2n 2025-03-10 14:27:47+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114138602965774995 2025-03-10 15:40:16+00:00| seen|...

CERTFR-2025-CTI-001

creationtimestamp| type| source ---|---|--- 2025-02-20 10:14:20+00:00| seen| https://bsky.app/profile/anssi-fr.bsky.social/post/3lim2lhmwh22r 2025-02-20 12:47:55+00:00| seen| https://bsky.app/profile/ilumium.eupolicy.social.ap.brid.gy/post/3limd54mdlcb2 2025-02-20 14:14:57+00:00| seen|...

The anatomy of a Toxic Combination of Risk

How to uncover potential threats and eliminate critical risks in your cloud environment...

Medium: python-pip

Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python-pip Issue Correction: Run dnf update python-pip --releasever 2023.6.20241111 to update your system. New Packages: noarch: ...

Making Sense of Kubernetes Initial Access Vectors Part 1 – Control Plane

Explore Kubernetes control plane access vectors, risks, and security strategies to prevent unauthorized access and protect your clusters from potential threats...

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

Docker is warning of a critical flaw impacting certain versions of Docker Engine that could allow an attacker to sidestep authorization plugins AuthZ under specific circumstances. Tracked as CVE-2024-41110, the bypass and privilege escalation vulnerability carries a CVSS score of 10.0, indicating...

ASB-A-260126994

Bulletin has no description...

Sailing Securely Across the SDLC: Introducing Wiz's Image Trust and Kubernetes Audit Log Collector

Secure your applications across the SDLC by deploying only trusted images and monitoring your Kubernetes control plane in near-real time to detect potential threats...

Poisoned Data, Malicious Manipulation: NIST Study Reveals AI Vulnerabilities

By Waqas NIST Unveils Insights on AI Vulnerabilities and Potential Threats.w This is a post from HackRead.com Read the original post: Poisoned Data, Malicious Manipulation: NIST Study Reveals AI Vulnerabilities...

Samsung adds Message Guard protection against zero-click exploits

Samsung has announced the introduction of Message Guard for the Samsung Galaxy S23 series. It will be gradually rolled out to other Galaxy smartphones and tablets later this year. Message Guard works on images received in messages by the apps "Samsung Messages" and "Messages by Google" and...

The art and science behind Microsoft threat hunting: Part 1

At Microsoft, we define threat hunting as the practice of actively looking for cyberthreats that have covertly or not so covertly penetrated an environment. This involves looking beyond the known alerts or malicious threats to discover new potential threats and vulnerabilities. Why do incident...

Reddit users crowdsourcing explicit images and identities

The BBC is warned of a large photograph trading ring which operated on popular group forum site Reddit. These warnings are in relation to stolen nude photographs and other content shared without permission. In this case, even non-explicit photos are being posted alongside frequently degrading and...

Key Features Of Threat Intelligence Platforms

By Owais Sultan Threat intelligence platforms TIP keep the company updated about new potential threats and attacks. Lets dig deeper into… This is a post from HackRead.com Read the original post: Key Features Of Threat Intelligence Platforms...

Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense

Todays threat landscape is incredibly fast-paced. New campaigns surface all the time, and the amount of damage that they can cause is not always immediately apparent. Security operations centers SOCs must be equipped with the tools and insight to identify and resolve potentially high-impact threa...

Androidqf - (Android Quick Forensics) Helps Quickly Gathering Forensic Evidence From Android Devices, In Order To Identify Potential Traces Of Compromise

androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. It is the successor of Snoopdroid, re-written in Go and leveraging official adb binaries. androidqf is intended to provide a simple and portable cross-platform utility ...